Others Working on JML Tools

The LOOP verification project from Bart Jacobs's SoS group at the Radboud University Nijmegen. This
group includes Erik Poll
and, over the years, Joachim van den Berg, Marieke Huisman, Engelbert
Hubbers, Joe Kiniry, Martijn Oostdijk, Martijn Warnier, and several
other contributors.

David R. Cok (see pictures), who is
an independent contributor, once working at Eastman Kodak, now
working at GrammaTech, who has worked on many tools, especially
OpenJML,
"jmldoc", "jmlspec", and ESC/Java2.

Peter Müller at
ETH Zurich
and his students are working on the
Universe type system.
They also work on modular verification, including a
treatment of frame axioms and a formal verification tool (Jive)
that will use JML as its specification language.

Arnd Poetzsch-Heffter
and his students are working on modular verification, including a
treatment of frame axioms and a formal verification tool (Jive)
that will use JML as its specification language.

David Naumann
and his students are working on the semantics of JML
and on using JML static verification tools to specify and check secure
information flow properties.

The TFC
(Constraint-based and Formal Techniques) group
in Besançon works on Java/JML applications in two different
directions. A testing activity,
led by Bruno Legeard,
works on adding JML/Java as an input to an existing framework for
the symbolic animation
and the
automated test generation from formal models. A verification activity,
led by Jacques Julliand,
works on the automatic generation of JML annotations from proof
obligations for verifying linear temporal properties.

Tao Xie's group
at North Carolina State University
is working on testing and verification related projects.

The Mobius project
is a European Commission supported project that is using JML
and developing "technology for establishing trust and security"
using proof carrying code.

The Relational Formal Methods Research Group (RFM)
led by Marcelo Frias
does research aimed at
several areas of software engineering, such as formal language design,
language analysis, software verification and validation, and automated
generation of test cases.
They have developed
TACO,
a tool that automatically analyzes a JML
specification using a SAT-solver as a backend.

The CHARTER project,
which is using JML for certification.
This project is both building specifications for essential Java classes
and the RTSJ (Radbound Universiteit Nijmegen)
and is using JML for automatic test generation (Chalmers).

The XJML project
is an extensible front-end for JML that
has the ability to process preconditions, posconditions,
and class invariants using JML and XML in separate files.
It can also do runtime assertion checking or extended static checking.

Although now disbanded, an important original group working on JML
was the former
extended static checking project (which includes ESC/Java)
at HP SRC Classic (formerly Compaq Systems Research Center).
This group included K. Rustan M. Leino, Cormac Flanagan, Mark Lillibridge,
Greg Nelson, Raymie Stata, James B. Saxe.

JML is an open project, and we welcome the participation of other groups.
If your group is working on JML but not listed above, please send an email to
Gary Leavens (leavens@eecs.ucf.edu).